Do people prefer this the way it is or should the default permissions be
changed?
The way I see it, the current set up is perhaps more secure by default
(ie. The permissions can be opened up after mount, in a controlled way).
Whatever people prefer, I'm happy with.
-- Charles
> -----Original Message-----
> From: yaffs-admin@stoneboat.aleph1.co.uk
> [mailto:yaffs-admin@stoneboat.aleph1.co.uk] On Behalf Of Luc
> Van Oostenryck
> Sent: Monday, 7 February 2005 2:24 a.m.
> To: yaffs@stoneboat.aleph1.co.uk
> Subject: Re: [Yaffs] Permission denied when non-root
>
>
> Karl Olsen wrote:
> > Hello all,
> >
> > I am having a problem with switching to a non-root user on my
> > AT91RM9200-based ARM system. I am using Linux 2.6.10 with the
> > AT91RM9200 patch from http://maxim.org.za/AT91RM9200/2.6/ (fixed so
> > that NAND support
> > works) and the Yaffs patches by Frank Rowand, and a
> statically linked
> > Busybox 1.00. / is on a Yaffs partition.
> >
> > # mount
> > /dev/mtdblock1 on / type yaffs (rw,noatime)
> > /dev/mtdblock0 on /boot type yaffs (ro,noatime)
> > none on /proc type proc (rw,nodiratime)
> >
> > Everything works fine when I'm root, and I can run Busybox commands
> > and
> > read
> > and write files. But when I do a "su karl" it says:
> >
> > / # su karl
> > su: cannot run /bin/sh: Permission denied
> >
> > /etc/passwd contains:
> > root:x:0:0:root:/root:/bin/sh
> > karl:x:500:100:KarlOlsen:/home/karl:/bin/sh
> >
> > # ls -l -d /bin
> > drwxr-xr-x 1 root root 512 Jan 1 00:00 bin
> >
> > /bin/sh is a symlink pointing to /bin/busybox:
> > -rwxrwxrwx 1 root root 438260 Jan 1 00:00 busybox
> >
> > I have tried replacing /bin/sh in /etc/passwd with other
> commands, but
> > I always get the Permission denied. The Busybox source
> shows that it
> > successfully changes identity to uid=500 and gid=100 and cd's to my
> > home directory but fails at the execv() that tried to run /bin/sh.
> >
> > I tried the same with an initrd with romfs, and with that,
> it worked.
> > But romfs doesn't seem to implement uid and gid for its
> > files/directories.
> >
> > Does anybody know if this problem can be related to Yaffs?
> Does the
> > Yaffs filesystem have (hidden) mount options that can deny
> execution
> > for non-root?
>
> Yes and no, the default permissions for yaffs root directory
> is 0666 thus the directory is not accessible for non root.
> Changing the permissions of the root dir to 0777 (or better
> to 0755) cure the problem until the next reboot.
>
> The following patch solve the problem permanently:
> ----
> diff -r1.14 yportenv.h
> 102c102
> < #define YAFFS_ROOT_MODE 0666
> ---
> > #define YAFFS_ROOT_MODE 0755
> ----
>
> > Regards,
> > Karl Olsen
>
>
> Luc Van Oostenryck
>
>
> _______________________________________________
> yaffs mailing list
> yaffs@stoneboat.aleph1.co.uk
> http://stoneboat.aleph1.co.uk/cgi-> bin/mailman/listinfo/yaffs
>
(text/plain)